Yes, which aids the spamming.

The first 6 digits of a card number is called the BIN code. That leaves just 9 digits that have to be spammed.

The fact that BIN lists are publicly available is reducing the space significantly.

I think the parent meant "card number that actually is in use and works" when saying "valid", not "follows the rules of card numbers".